Security update for qemu SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1241-1 Final 1 1 2021-04-16T11:59:57Z current 2021-04-16T11:59:57Z 2021-04-16T11:59:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qemu This update for qemu fixes the following issues: - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499) - Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385) - Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation (CVE-2020-13362, bsc#1172383) - Fix use-after-free in usb xhci packet handling (CVE-2020-25723, bsc#1178934) - Fix use-after-free in usb ehci packet handling (CVE-2020-25084, bsc#1176673) - Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624, bsc#1176682) - Fix infinite loop (DoS) in usb hcd-ohci emulation (CVE-2020-25625, bsc#1176684) - Fix guest triggerable assert in shared network handling code (CVE-2020-27617, bsc#1178174) - Fix infinite loop (DoS) in e1000e device emulation (CVE-2020-28916, bsc#1179468) - Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108) - Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469, bsc#1173612) - Fix infinite loop (DoS) in e1000 device emulation (CVE-2021-20257, bsc#1182577) - Fix OOB access (stack overflow) in rtl8139 NIC emulation (CVE-2021-3416, bsc#1182968) - Fix OOB access (stack overflow) in other NIC emulations (CVE-2021-3416) - Fix OOB access in SLIRP ARP/NCSI packet processing (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467) - Fix null pointer dereference possibility (DoS) in MegaRAID SAS 8708EM2 emulation (CVE-2020-13659, bsc#1172386) - Fix OOB access in iscsi (CVE-2020-11947, bsc#1180523) - Fix OOB access in vmxnet3 emulation (CVE-2021-20203, bsc#1181639) - Fix buffer overflow in the XGMAC device (CVE-2020-15863, bsc#1174386) - Fix DoS in packet processing of various emulated NICs (CVE-2020-16092, bsc#1174641) - Fix OOB access while processing USB packets (CVE-2020-14364, bsc#1175441) - Fix package scripts to not use hard coded paths for temporary working directories and log files (bsc#1182425) - Fix potential privilege escalation in virtfs (CVE-2021-20181, bsc#1182137) - Fix OOB access possibility in ES1370 audio device emulation (CVE-2020-13361, bsc#1172384) - Fix OOB access in ROM loading (CVE-2020-13765, bsc#1172478) - Fix qemu-testsuite failure - Fix vm migration is failing with input/output error when nfs server is disconnected (bsc#1119115) - Fix OOB access in ARM interrupt handling (CVE-2021-20221, bsc#1181933) - Fix slowness in arm32 emulation (bsc#1112499) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-1241,SUSE-OpenStack-Cloud-9-2021-1241,SUSE-OpenStack-Cloud-Crowbar-9-2021-1241,SUSE-SLE-SAP-12-SP4-2021-1241,SUSE-SLE-SERVER-12-SP4-LTSS-2021-1241 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ Link for SUSE-SU-2021:1241-1 https://lists.suse.com/pipermail/sle-security-updates/2021-April/008649.html E-Mail link for SUSE-SU-2021:1241-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1112499 SUSE Bug 1112499 https://bugzilla.suse.com/1119115 SUSE Bug 1119115 https://bugzilla.suse.com/1172383 SUSE Bug 1172383 https://bugzilla.suse.com/1172384 SUSE Bug 1172384 https://bugzilla.suse.com/1172385 SUSE Bug 1172385 https://bugzilla.suse.com/1172386 SUSE Bug 1172386 https://bugzilla.suse.com/1172478 SUSE Bug 1172478 https://bugzilla.suse.com/1173612 SUSE Bug 1173612 https://bugzilla.suse.com/1174386 SUSE Bug 1174386 https://bugzilla.suse.com/1174641 SUSE Bug 1174641 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1176673 SUSE Bug 1176673 https://bugzilla.suse.com/1176682 SUSE Bug 1176682 https://bugzilla.suse.com/1176684 SUSE Bug 1176684 https://bugzilla.suse.com/1178174 SUSE Bug 1178174 https://bugzilla.suse.com/1178934 SUSE Bug 1178934 https://bugzilla.suse.com/1179466 SUSE Bug 1179466 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179468 SUSE Bug 1179468 https://bugzilla.suse.com/1180523 SUSE Bug 1180523 https://bugzilla.suse.com/1181108 SUSE Bug 1181108 https://bugzilla.suse.com/1181639 SUSE Bug 1181639 https://bugzilla.suse.com/1181933 SUSE Bug 1181933 https://bugzilla.suse.com/1182137 SUSE Bug 1182137 https://bugzilla.suse.com/1182425 SUSE Bug 1182425 https://bugzilla.suse.com/1182577 SUSE Bug 1182577 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://www.suse.com/security/cve/CVE-2020-11947/ SUSE CVE CVE-2020-11947 page https://www.suse.com/security/cve/CVE-2020-12829/ SUSE CVE CVE-2020-12829 page https://www.suse.com/security/cve/CVE-2020-13361/ SUSE CVE CVE-2020-13361 page https://www.suse.com/security/cve/CVE-2020-13362/ SUSE CVE CVE-2020-13362 page https://www.suse.com/security/cve/CVE-2020-13659/ SUSE CVE CVE-2020-13659 page https://www.suse.com/security/cve/CVE-2020-13765/ SUSE CVE CVE-2020-13765 page https://www.suse.com/security/cve/CVE-2020-14364/ SUSE CVE CVE-2020-14364 page https://www.suse.com/security/cve/CVE-2020-15469/ SUSE CVE CVE-2020-15469 page https://www.suse.com/security/cve/CVE-2020-15863/ SUSE CVE CVE-2020-15863 page https://www.suse.com/security/cve/CVE-2020-16092/ SUSE CVE CVE-2020-16092 page https://www.suse.com/security/cve/CVE-2020-25084/ SUSE CVE CVE-2020-25084 page https://www.suse.com/security/cve/CVE-2020-25624/ SUSE CVE CVE-2020-25624 page https://www.suse.com/security/cve/CVE-2020-25625/ SUSE CVE CVE-2020-25625 page https://www.suse.com/security/cve/CVE-2020-25723/ SUSE CVE CVE-2020-25723 page https://www.suse.com/security/cve/CVE-2020-27617/ SUSE CVE CVE-2020-27617 page https://www.suse.com/security/cve/CVE-2020-28916/ SUSE CVE CVE-2020-28916 page https://www.suse.com/security/cve/CVE-2020-29129/ SUSE CVE CVE-2020-29129 page https://www.suse.com/security/cve/CVE-2020-29130/ SUSE CVE CVE-2020-29130 page https://www.suse.com/security/cve/CVE-2020-29443/ SUSE CVE CVE-2020-29443 page https://www.suse.com/security/cve/CVE-2021-20181/ SUSE CVE CVE-2021-20181 page https://www.suse.com/security/cve/CVE-2021-20203/ SUSE CVE CVE-2021-20203 page https://www.suse.com/security/cve/CVE-2021-20221/ SUSE CVE CVE-2021-20221 page https://www.suse.com/security/cve/CVE-2021-20257/ SUSE CVE CVE-2021-20257 page https://www.suse.com/security/cve/CVE-2021-3416/ SUSE CVE CVE-2021-3416 page SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 qemu-2.11.2-5.29.1 qemu-arm-2.11.2-5.29.1 qemu-block-curl-2.11.2-5.29.1 qemu-block-dmg-2.11.2-5.29.1 qemu-block-iscsi-2.11.2-5.29.1 qemu-block-rbd-2.11.2-5.29.1 qemu-block-ssh-2.11.2-5.29.1 qemu-extra-2.11.2-5.29.1 qemu-guest-agent-2.11.2-5.29.1 qemu-ipxe-1.0.0+-5.29.1 qemu-kvm-2.11.2-5.29.1 qemu-lang-2.11.2-5.29.1 qemu-linux-user-2.11.2-5.29.1 qemu-ppc-2.11.2-5.29.1 qemu-s390-2.11.2-5.29.1 qemu-seabios-1.11.0_0_g63451fc-5.29.1 qemu-sgabios-8-5.29.1 qemu-tools-2.11.2-5.29.1 qemu-vgabios-1.11.0_0_g63451fc-5.29.1 qemu-x86-2.11.2-5.29.1 qemu-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-arm-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-curl-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-iscsi-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-rbd-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-block-ssh-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-guest-agent-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-ipxe-1.0.0+-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-kvm-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-lang-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-ppc-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-s390-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-seabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-sgabios-8-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-tools-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-vgabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-x86-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS qemu-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-curl-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-iscsi-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-rbd-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-block-ssh-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-guest-agent-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ipxe-1.0.0+-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-kvm-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-lang-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-ppc-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-seabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-sgabios-8-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-tools-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-vgabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-x86-2.11.2-5.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 qemu-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-block-curl-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-block-iscsi-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-block-rbd-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-block-ssh-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-guest-agent-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-ipxe-1.0.0+-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-kvm-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-lang-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-seabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-sgabios-8-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-tools-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-vgabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-x86-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud 9 qemu-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-curl-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-iscsi-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-rbd-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-block-ssh-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-guest-agent-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-ipxe-1.0.0+-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-kvm-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-lang-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-seabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-sgabios-8-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-tools-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-vgabios-1.11.0_0_g63451fc-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 qemu-x86-2.11.2-5.29.1 as a component of SUSE OpenStack Cloud Crowbar 9 iscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may disclose unrelated information from process memory to an attacker. CVE-2020-11947 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-11947.html CVE-2020-11947 https://bugzilla.suse.com/1180523 SUSE Bug 1180523 In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service. CVE-2020-12829 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-12829.html CVE-2020-12829 https://bugzilla.suse.com/1172385 SUSE Bug 1172385 In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation. CVE-2020-13361 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-13361.html CVE-2020-13361 https://bugzilla.suse.com/1172384 SUSE Bug 1172384 In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user. CVE-2020-13362 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-13362.html CVE-2020-13362 https://bugzilla.suse.com/1172383 SUSE Bug 1172383 address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer. CVE-2020-13659 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-13659.html CVE-2020-13659 https://bugzilla.suse.com/1172386 SUSE Bug 1172386 rom_copy() in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation. CVE-2020-13765 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-13765.html CVE-2020-13765 https://bugzilla.suse.com/1172478 SUSE Bug 1172478 An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host. CVE-2020-14364 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-14364.html CVE-2020-14364 https://bugzilla.suse.com/1175441 SUSE Bug 1175441 https://bugzilla.suse.com/1175534 SUSE Bug 1175534 https://bugzilla.suse.com/1176494 SUSE Bug 1176494 https://bugzilla.suse.com/1177130 SUSE Bug 1177130 In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CVE-2020-15469 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-15469.html CVE-2020-15469 https://bugzilla.suse.com/1173612 SUSE Bug 1173612 hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential privileged code execution. This was fixed in commit 5519724a13664b43e225ca05351c60b4468e4555. CVE-2020-15863 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-15863.html CVE-2020-15863 https://bugzilla.suse.com/1174386 SUSE Bug 1174386 In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw to abort the QEMU process on the host, resulting in a denial of service condition in net_tx_pkt_add_raw_fragment in hw/net/net_tx_pkt.c. CVE-2020-16092 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-16092.html CVE-2020-16092 https://bugzilla.suse.com/1174641 SUSE Bug 1174641 QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked. CVE-2020-25084 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-25084.html CVE-2020-25084 https://bugzilla.suse.com/1176673 SUSE Bug 1176673 hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver. CVE-2020-25624 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-25624.html CVE-2020-25624 https://bugzilla.suse.com/1176682 SUSE Bug 1176682 hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop. CVE-2020-25625 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-25625.html CVE-2020-25625 https://bugzilla.suse.com/1176684 SUSE Bug 1176684 A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service. CVE-2020-25723 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-25723.html CVE-2020-25723 https://bugzilla.suse.com/1178934 SUSE Bug 1178934 https://bugzilla.suse.com/1178935 SUSE Bug 1178935 eth_get_gso_type in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash the QEMU process via packet data that lacks a valid Layer 3 protocol. CVE-2020-27617 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-27617.html CVE-2020-27617 https://bugzilla.suse.com/1178174 SUSE Bug 1178174 hw/net/e1000e_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address. CVE-2020-28916 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-28916.html CVE-2020-28916 https://bugzilla.suse.com/1178683 SUSE Bug 1178683 https://bugzilla.suse.com/1179468 SUSE Bug 1179468 ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29129 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-29129.html CVE-2020-29129 https://bugzilla.suse.com/1179466 SUSE Bug 1179466 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 https://bugzilla.suse.com/1179484 SUSE Bug 1179484 slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the total packet length. CVE-2020-29130 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-29130.html CVE-2020-29130 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1179467 SUSE Bug 1179467 https://bugzilla.suse.com/1179477 SUSE Bug 1179477 ide_atapi_cmd_reply_end in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated. CVE-2020-29443 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2020-29443.html CVE-2020-29443 https://bugzilla.suse.com/1181108 SUSE Bug 1181108 A race condition flaw was found in the 9pfs server implementation of QEMU up to and including 5.2.0. This flaw allows a malicious 9p client to cause a use-after-free error, potentially escalating their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity as well as system availability. CVE-2021-20181 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2021-20181.html CVE-2021-20181 https://bugzilla.suse.com/1182137 SUSE Bug 1182137 An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. CVE-2021-20203 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2021-20203.html CVE-2021-20203 https://bugzilla.suse.com/1181639 SUSE Bug 1181639 An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating controller state fields and their subsequent processing. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario. CVE-2021-20221 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2021-20221.html CVE-2021-20221 https://bugzilla.suse.com/1181933 SUSE Bug 1181933 An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability. CVE-2021-20257 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2021-20257.html CVE-2021-20257 https://bugzilla.suse.com/1182577 SUSE Bug 1182577 https://bugzilla.suse.com/1182846 SUSE Bug 1182846 A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario. CVE-2021-3416 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-arm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-s390-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server 12 SP4-LTSS:qemu-x86-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-curl-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-iscsi-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-rbd-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-block-ssh-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-guest-agent-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ipxe-1.0.0+-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-kvm-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-lang-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-ppc-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-sgabios-8-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-tools-2.11.2-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud 9:qemu-x86-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-curl-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-iscsi-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-rbd-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-block-ssh-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-guest-agent-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-ipxe-1.0.0+-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-kvm-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-lang-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-seabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-sgabios-8-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-tools-2.11.2-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-vgabios-1.11.0_0_g63451fc-5.29.1 SUSE OpenStack Cloud Crowbar 9:qemu-x86-2.11.2-5.29.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211241-1/ https://www.suse.com/security/cve/CVE-2021-3416.html CVE-2021-3416 https://bugzilla.suse.com/1182968 SUSE Bug 1182968 https://bugzilla.suse.com/1186473 SUSE Bug 1186473